Enables Russian citizens to create and use electronic signatures (ЭП) for government services directly in the browser, bridging web applications with local GOST-compliant cryptographic tools and hardware tokens

User installs the extension + native Gosplugin application. When a web page on Gosuslugi portal requests an electronic signature, the content script intercepts the request, the background script forwards it via native messaging or WebSocket to the local Gosplugin app, which performs cryptographic operations using installed providers and hardware tokens, then returns the signed result back to the web page.

Target users: Russian citizens using Gosuslugi government portal / Users needing electronic signatures for government services / Organizations interfacing with Russian government systems (SMEV)

Cannot verify whether the destination Gosuslugi portal requires login for the services this extension enables (out of scope for extension analysis)
The native messaging host application (Gosplugin) is not included in the extension package and must be installed separately
Limited visibility into the exact web pages that trigger this extension's functionality since content_scripts matches all URLs

Monetization

No paid features detected

No evidence of paid features. The 'pro' keyword hits are all from PROTOCOL variables (communication protocol state management), not 'professional' tier. The 'upgrade' references are about software version updates (notifying user to update the native app), not paid upgrades. No premium, subscription, payment, billing, or Stripe-related code found. This is an official government-provided tool distributed free via Chrome Web Store.

Confidence: 90
Payment platform: --
Source: AI / High
Login required: No
Reason: The extension itself does not implement login or require user authentication. It is a local crypto bridge that communicates with a native messaging host (chrome.gosuslugi.plugin) and WebSocket (localhost:9001). The 'auth' keyword hits in source code refer to AuthRoot certificate stores (cryptographic authority certificates), not user authentication. The 'TokensLoginFailed' error (code 30017) refers to hardware token PIN authentication failure, not portal login. The destination service (Gosuslugi portal) may require its own authentication to use government services, but the extension's core workflow of communicating with the local crypto module does not gate behind login.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging
扩展能力较强：storage、scripting、activeTab
主机权限覆盖范围较宽

Publisher

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access